This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft File: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json) Hash identifier: XZ+V7SB3A+6zgJPejzZ8NrF+qdD8jSE77Meq+4lEqNc= Subject key identifier: AD:94:05:73:90:51:95:99:7E:BC:3B:64:65:C4:59:73:DB:D6:B6:F9 Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae Certificate serial: 019AF3F70DFEB834897F5F84E978A61B3764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft Manifest number: 0C24 Signing time: Sat 06 Dec 2025 14:00:45 +0000 Manifest this update: Sat 06 Dec 2025 14:00:45 +0000 Manifest next update: Sun 07 Dec 2025 14:00:45 +0000 Files and hashes: 1: 6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa (hash: avRjJs3tQZCWYxxzrvKfKWMx6I1KbzcTNaTHuCyd7uA=) 2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: q1auUDKookmCBR8CuG6FlStR2UnxQi4boyJ9n4Zbt0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:0d:fe:b8:34:89:7f:5f:84:e9:78:a6:1b:37:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae Validity Not Before: Dec 6 14:00:45 2025 GMT Not After : Dec 7 14:00:45 2025 GMT Subject: CN=ad940573905195997ebc3b6465c45973dbd6b6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:ad:0c:1e:d7:5c:b7:80:97:8b:91:0b:d2: 6f:cc:7b:28:09:a9:89:a8:ed:1f:6d:c4:9b:e9:80: 75:32:2d:7a:de:45:68:f9:71:f0:a6:ab:29:16:e8: 18:4a:6a:f8:06:6a:5f:e8:82:69:fa:91:a4:84:37: 31:cd:92:57:c6:eb:e0:0d:f4:53:a1:f1:50:55:18: 44:4b:3f:8f:16:dc:24:14:1d:33:47:af:5f:7f:ae: 2a:d3:62:40:02:65:d1:5b:b7:41:b9:41:dc:db:62: 65:f3:b8:68:d5:a2:96:e5:45:40:0b:8d:5c:1f:a8: 0e:0f:97:ed:73:d3:2c:8e:ae:b4:89:62:db:5e:92: f8:2b:b1:27:a8:4e:38:39:07:a8:91:e9:8c:31:77: c9:ca:7c:54:2e:e7:38:d3:d3:06:ce:0e:be:3c:67: b1:ef:95:c7:fb:0a:4f:ed:ce:04:81:b8:de:dc:ff: e1:d7:f8:71:a1:37:19:93:61:c4:b1:a5:ed:10:d9: b8:4b:a0:11:06:7f:2b:35:ae:0d:68:39:89:b8:4d: 16:bd:3f:dd:f2:97:3e:18:5a:48:54:ff:dd:b4:1c: 6e:c4:96:52:42:3f:d6:16:a3:7c:7d:f4:7c:44:de: ca:d1:c2:11:e5:0c:95:ae:4a:c8:4c:06:f3:eb:a0: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:94:05:73:90:51:95:99:7E:BC:3B:64:65:C4:59:73:DB:D6:B6:F9 X509v3 Authority Key Identifier: keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b3:13:31:58:9e:71:94:60:b5:05:1c:34:d1:b1:d4:5a:79: f7:e3:b1:8d:71:d7:50:46:32:6b:7e:00:be:c2:84:92:92:2f: e4:26:51:4f:b8:d0:e8:11:77:f6:4d:df:34:61:e3:8b:d0:0a: d8:cf:f5:89:6e:92:3f:b2:9c:96:59:52:d2:3a:60:8e:8c:21: 78:79:4a:2b:39:da:8f:cb:f6:5c:dd:43:aa:4f:a7:b9:91:0b: e1:52:8a:a7:c9:9b:80:ac:03:28:f8:94:c8:3a:24:98:8e:76: e4:63:bb:69:43:80:5c:d8:88:0f:24:ea:82:ab:57:ed:18:43: db:d2:f3:da:51:d1:eb:ba:43:83:63:c7:ad:df:2f:c8:05:d1: 3f:54:a7:e1:b9:ee:4f:91:1d:82:d3:4e:9a:96:bd:6e:b8:7f: 1b:00:cf:03:f0:eb:e3:58:3d:97:00:59:6d:d8:1a:75:3c:36: e4:6f:5f:d7:99:d4:d9:9c:70:ae:ed:2a:e8:d0:9e:3b:a3:55: fe:b8:1f:18:f8:98:c9:15:fe:9f:a5:a9:d6:d7:b8:51:d7:87: b7:24:0a:30:80:b5:7b:b1:b9:b6:b4:95:c5:3c:b5:44:e6:46: 37:59:cb:c8:29:13:dc:83:4d:bb:43:3c:b1:eb:3b:4b:6f:dc: 13:a6:ea:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9w3+uDSJf1+E6XimGzdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwY2FjOGQ1MjRhNWZlYzdmYzgzYTIzODMwZmJmOTIyNmE3 NjAxYWUwHhcNMjUxMjA2MTQwMDQ1WhcNMjUxMjA3MTQwMDQ1WjAzMTEwLwYDVQQD EyhhZDk0MDU3MzkwNTE5NTk5N2ViYzNiNjQ2NWM0NTk3M2RiZDZiNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L6tDB7XXLeAl4uRC9JvzHsoCamJ qO0fbcSb6YB1Mi163kVo+XHwpqspFugYSmr4Bmpf6IJp+pGkhDcxzZJXxuvgDfRT ofFQVRhESz+PFtwkFB0zR69ff64q02JAAmXRW7dBuUHc22Jl87ho1aKW5UVAC41c H6gOD5ftc9Msjq60iWLbXpL4K7EnqE44OQeokemMMXfJynxULuc409MGzg6+PGex 75XH+wpP7c4Egbje3P/h1/hxoTcZk2HEsaXtENm4S6ARBn8rNa4NaDmJuE0WvT/d 8pc+GFpIVP/dtBxuxJZSQj/WFqN8ffR8RN7K0cIR5QyVrkrITAbz66CvPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2UBXOQUZWZfrw7ZGXEWXPb1rb5MB8GA1UdIwQY MBaAFMDKyNUkpf7H/IOiODD7+SJqdgGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODIt NzY1NWM4OWYxNGQ2LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODItNzY1NWM4OWYxNGQ2 LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7MTMVie cZRgtQUcNNGx1Fp59+OxjXHXUEYya34AvsKEkpIv5CZRT7jQ6BF39k3fNGHji9AK 2M/1iW6SP7KclllS0jpgjowheHlKKznaj8v2XN1Dqk+nuZEL4VKKp8mbgKwDKPiU yDokmI525GO7aUOAXNiIDyTqgqtX7RhD29Lz2lHR67pDg2PHrd8vyAXRP1Sn4bnu T5EdgtNOmpa9brh/GwDPA/Dr41g9lwBZbdgadTw25G9f15nU2Zxwru0q6NCeO6NV /rgfGPiYyRX+n6Wp1te4UdeHtyQKMIC1e7G5trSVxTy1ROZGN1nLyCkT3INNu0M8 ses7S2/cE6bqTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:33 2025 by rpki-client